git: 2b4fb1350cee - stable/12 - openssh: include destination constraints for smartcard keys

From: Ed Maste <emaste_at_FreeBSD.org>
Date: Mon, 05 Jun 2023 16:03:31 UTC
The branch stable/12 has been updated by emaste:

URL: https://cgit.FreeBSD.org/src/commit/?id=2b4fb1350ceea0f2a0f04b1b8f5bfd3c32329ae4

commit 2b4fb1350ceea0f2a0f04b1b8f5bfd3c32329ae4
Author:     Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2023-06-05 14:49:53 +0000
Commit:     Ed Maste <emaste@FreeBSD.org>
CommitDate: 2023-06-05 14:56:23 +0000

    openssh: include destination constraints for smartcard keys
    
    From openssh-portable 54ac4ab2b53ce9fcb66b8250dee91c070e4167ed,
    OpenBSD-Commit-ID: add879fac6903a1cb1d1e42c4309e5359c3d870f
    
    PR:             271839
    Sponsored by:   The FreeBSD Foundation
---
 crypto/openssh/authfd.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crypto/openssh/authfd.c b/crypto/openssh/authfd.c
index b633e35eaf8b..b9ae505ad7b2 100644
--- a/crypto/openssh/authfd.c
+++ b/crypto/openssh/authfd.c
@@ -666,7 +666,7 @@ ssh_update_card(int sock, int add, const char *reader_id, const char *pin,
     struct dest_constraint **dest_constraints, size_t ndest_constraints)
 {
 	struct sshbuf *msg;
-	int r, constrained = (life || confirm);
+	int r, constrained = (life || confirm || dest_constraints);
 	u_char type;
 
 	if (add) {